GRAYLOG - Chapter 10, Exercise 2 Solution
==========================================================
Building the Step 3 Baseline-Noise Check Query

PROBLEM
-------
Build the query for Step 3 (the baseline-noise check) as a full, real
query, substituting a literal exact error phrase, "upstream request
failed", and a literal known-healthy account, bullhorn-40021.

SOLUTION
--------
Step 3's own template was:

    "<the exact error text>" AND account:<known-healthy account>

Substituting the given literal values - the exact error phrase in
double quotes (per Chapter 1's own exact-phrase syntax), combined with
the known-healthy account using AND:

    "upstream request failed" AND account:bullhorn-40021

ANSWER: "upstream request failed" AND account:bullhorn-40021

----
WHY THIS WORKS AS AN ANSWER

This is a direct substitution into this chapter's own Step 3 template,
reusing Chapter 1's own quoted-exact-phrase syntax for the error text
and Chapter 2's own account field for the comparison account. If this
query returns real matches, the error is likely baseline noise (per
Chapter 9); if it returns nothing, that strengthens the case that the
error is genuinely specific to the account originally reporting the
problem.